Copy Search Guard config to dedicated directory

Closes #191

README.md

@@ -89,11 +89,11 @@ $ docker-compose up -d
 
 Search Guard must be initialized after Elasticsearch is started:
 
-```bash
+```console
 $ docker-compose exec -T elasticsearch bin/init_sg.sh
 ```
 
-_This executes sgadmin and loads the configuration from `elasticsearch/config/sg*.yml`_
+_This executes sgadmin and loads the configuration from `elasticsearch/config/sg/sg*.yml`_
 
 Give Kibana a few seconds to initialize, then access the Kibana web UI by hitting
 [http://localhost:5601](http://localhost:5601) with a web browser and use the aforementioned credentials to login.

elasticsearch/Dockerfile

 # https://github.com/elastic/elasticsearch-docker
 FROM docker.elastic.co/elasticsearch/elasticsearch-oss:6.1.0
 
-COPY config/ config/
+COPY config/sg/ config/sg/
 COPY bin/ bin/
 
 # Search Guard plugin
@@ -9,7 +9,9 @@ COPY bin/ bin/
 RUN elasticsearch-plugin install --batch com.floragunn:search-guard-6:6.1.0-20.1 \
 	&& chmod +x \
 		plugins/search-guard-6/tools/hash.sh \
-		plugins/search-guard-6/tools/sgadmin.sh
+		plugins/search-guard-6/tools/sgadmin.sh \
+	&& chown -R elasticsearch config/sg/ \
+	&& chmod -R go= config/sg/
 
 # Add your elasticsearch plugins setup here
 # Example: RUN elasticsearch-plugin install analysis-icu

elasticsearch/bin/init_sg.sh

 #!/bin/sh
 plugins/search-guard-6/tools/sgadmin.sh \
-	-cd config/ \
-	-ts config/truststore.jks \
-	-ks config/kirk-keystore.jks \
+	-cd config/sg/ \
+	-ts config/sg/truststore.jks \
+	-ks config/sg/kirk-keystore.jks \
 	-nhnv \
 	-icl

elasticsearch/config/elasticsearch.yml

@@ -19,8 +19,8 @@ discovery.type: single-node
 #
 searchguard.enterprise_modules_enabled: false
 
-searchguard.ssl.transport.keystore_filepath: node-0-keystore.jks
-searchguard.ssl.transport.truststore_filepath: truststore.jks
+searchguard.ssl.transport.keystore_filepath: sg/node-0-keystore.jks
+searchguard.ssl.transport.truststore_filepath: sg/truststore.jks
 searchguard.ssl.transport.enforce_hostname_verification: false
 
 searchguard.authcz.admin_dn: